This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: 3AV8vrFwX8bVlhUTcrw4a6aOGlodDQxI2XnWtD6RcQE= Subject key identifier: D4:E1:C6:D9:F8:DD:5F:EF:B2:02:42:A2:81:CB:6C:2D:9C:2A:40:D1 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 6AF6FC8525D67A2FDAD726071E73E5089144B195 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 0102 Signing time: Fri 05 Dec 2025 23:01:30 +0000 Manifest this update: Fri 05 Dec 2025 22:56:30 +0000 Manifest next update: Mon 08 Dec 2025 23:42:30 +0000 Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) 2: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: ZIDmkmXH+qAF5xQg90UUJiKZ3kSvPEdrKJouqvbIZ7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f6:fc:85:25:d6:7a:2f:da:d7:26:07:1e:73:e5:08:91:44:b1:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Dec 5 22:56:30 2025 GMT Not After : Dec 8 23:42:30 2025 GMT Subject: CN=D4E1C6D9F8DD5FEFB20242A281CB6C2D9C2A40D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:25:65:df:70:a5:b4:83:90:25:10:68:d7: 43:40:a5:4d:18:07:41:af:a4:1f:18:6b:89:7e:17: 37:a5:25:a3:16:88:17:49:89:d9:6f:f5:2d:e9:38: bb:27:25:b2:e2:31:cf:80:d0:ce:9c:72:0b:33:4c: ae:84:3a:c4:81:e2:2a:d4:65:e8:f8:0d:1a:68:76: 35:84:6d:f0:59:a7:34:6b:6b:09:4c:3d:51:a7:87: e7:55:93:89:64:1f:60:07:3b:b6:0f:e1:f3:c7:bc: 06:c8:80:ca:00:ff:5a:96:71:94:61:5a:98:63:c2: dd:1f:bc:e8:81:66:3c:f5:3d:53:bb:64:c4:55:cf: de:e8:21:ac:aa:42:2a:b8:7b:92:b3:b4:5c:fc:db: c6:88:5a:ef:d6:1b:7e:42:73:53:7b:6d:1b:b3:ab: c2:78:5a:e6:69:f2:d9:b8:9b:eb:50:f1:e1:28:c9: 9c:8b:77:d6:32:ad:bf:b3:bf:c5:b9:a2:7a:a2:af: c9:b5:4f:e7:96:f8:2e:6c:ea:57:82:66:cc:e7:f8: d6:24:b6:ab:54:65:c5:86:87:4a:7a:d2:93:8b:0d: ab:17:24:c1:76:d8:54:79:82:fa:19:01:ba:36:12: 03:27:6d:5b:2e:70:b0:aa:54:38:bd:06:b9:ba:12: 09:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E1:C6:D9:F8:DD:5F:EF:B2:02:42:A2:81:CB:6C:2D:9C:2A:40:D1 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:61:bf:b6:17:50:a4:6b:4b:c8:1c:dd:7d:78:40:c8:ef:62: 4e:9a:f7:63:73:3f:57:38:aa:02:10:52:62:4c:3d:f5:ca:f7: c2:de:7a:29:77:b6:86:01:0c:4f:f4:87:9d:89:3a:63:88:45: 79:06:ad:4a:46:bd:09:aa:c7:67:7f:2f:04:9b:b4:86:d6:2e: 5a:d4:eb:0f:93:a6:bf:47:b1:02:22:fd:1c:c8:14:ca:d6:2d: 6b:f9:d8:7e:c2:62:df:4e:dd:2d:f6:2b:5d:f8:2a:22:f2:8b: 1d:52:60:a8:69:b5:16:0a:ed:df:b1:a9:76:2a:eb:58:69:26: 14:3a:dc:ab:53:2c:34:e8:0a:2d:d4:59:f5:1b:b1:69:1a:a6: b9:87:0b:00:b4:6f:e9:23:e5:ea:fe:67:e7:4e:84:ac:cc:fb: 9e:d6:c1:94:6d:55:b9:6c:16:bc:4d:4a:41:6d:a6:dc:e7:47: c8:14:f6:e2:3f:08:43:82:8d:66:f0:e3:21:f5:1c:06:0a:2c: e3:7d:02:1f:87:c9:34:77:8a:3c:7f:0b:c5:d1:1d:1a:e8:4a: 6c:4c:a9:28:c6:89:f7:c9:2f:a0:1f:35:64:dc:81:01:56:14: d2:54:3e:30:bd:b2:fc:ac:0e:23:db:9a:1d:e9:ac:34:ae:81: ee:29:13:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavb8hSXWei/a1yYHHnPlCJFEsZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTEyMDUyMjU2MzBaFw0yNTEyMDgyMzQyMzBaMDMxMTAvBgNV BAMTKEQ0RTFDNkQ5RjhERDVGRUZCMjAyNDJBMjgxQ0I2QzJEOUMyQTQwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFiVl33CltIOQJRBo10NApU0Y B0GvpB8Ya4l+FzelJaMWiBdJidlv9S3pOLsnJbLiMc+A0M6ccgszTK6EOsSB4irU Zej4DRpodjWEbfBZpzRrawlMPVGnh+dVk4lkH2AHO7YP4fPHvAbIgMoA/1qWcZRh Wphjwt0fvOiBZjz1PVO7ZMRVz97oIayqQiq4e5KztFz828aIWu/WG35Cc1N7bRuz q8J4WuZp8tm4m+tQ8eEoyZyLd9Yyrb+zv8W5onqir8m1T+eW+C5s6leCZszn+NYk tqtUZcWGh0p60pOLDasXJMF22FR5gvoZAbo2EgMnbVsucLCqVDi9Brm6EglxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OHG2fjdX++yAkKigctsLZwqQNEwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1hv7YXUKRrS8gc3X14QMjvYk6a92NzP1c4 qgIQUmJMPfXK98Leeil3toYBDE/0h52JOmOIRXkGrUpGvQmqx2d/LwSbtIbWLlrU 6w+Tpr9HsQIi/RzIFMrWLWv52H7CYt9O3S32K134KiLyix1SYKhptRYK7d+xqXYq 61hpJhQ63KtTLDToCi3UWfUbsWkaprmHCwC0b+kj5er+Z+dOhKzM+57WwZRtVbls FrxNSkFtptznR8gU9uI/CEOCjWbw4yH1HAYKLON9Ah+HyTR3ijx/C8XRHRroSmxM qSjGiffJL6AfNWTcgQFWFNJUPjC9svysDiPbmh3prDSuge4pE1Y= -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:40 2025 by rpki-client